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Section II: 

AMENDMENT UNDER 37 CFR §1.121 to the 
SPECIFICATION 

In the DETAILED DESCRIPTION OF THE INVENTION, please replace paragraph 
[0003] with the following paragraph: 

[0003] In many cases, the password is generated by the supplier of the service or the 
application program itself. In such cases, the user may or may not be able to modify that 
password to be something easily remembered. This can result in a single user having 
[[a]] many different user names and passwords, each of which is associated with a single 
web site or application program. 

In the DETAILED DESCRIPTION OF THE INVENTION, please replace paragraph 
[0008] with the following paragraph: 

[0008] One attempt at solving this problem has been provided in Microsoft's Internet Explorer 
("IE") [TM] known as their web form "auto-complete" feature. Using auto - comp l eted thjs 
auto-complete feature , users can automatically complete or fill-in fields in web forms based on 
previously defined data which is stored by Internet Explorer on a user's local computer. 
Potentially, this feature can be used to memorize and enter a password field in a website form, 
thereby relieving the user of having to remember the password for that form or website. In 
essence, though, this feature circumvents the security of the form's authorization and 
authentication process because the auto-complete feature of Internet Explorer [TM] does not 
require a password to operate it. So, any person who has access to the user's computer, and 
therefore access to the user's auto-complete memorized data file, may use Internet Explorer [TM] 
to auto-complete a fbnn, such as a log-on sequence, and subsequently access the user's online 
accounts and files. 
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In the DETAILED DESCRIPTION OF THE INVENTION, please replace paragraph 
[0019] with the following paragraph: 

[0019] An electronic password wallet provides quick and easy access to any number of 
password-protected computer applications and web sites in a secure fashion without 
adding to the user cognitive load and without circumventing the inherent security of such 
password-protection schemes. The invention achieves this by overlaying an existing 
password field on a device display with password wallet pop-up field. The pop-up field 
allows a common "master" key or password to unlock the password wallet, regardless of 
host application, form^ or web site being accessed. 

In the DETAILED DESCRIPTION OF THE INVENTION, please replace paragraph 
[0021] with the following paragraph: 

[0021] Using the invention, the user needs to only remember the wallet master key, 
does not have to remember a multitude of passwords and user ID's for a plurality of 
application programs and web sites, and does not have to cut-and-paste or retype the 
password if looked up from a written or electronic storage of these passwords. The 
master wallet key provides for security of the passwords themselves, and the structure of 
the preferred embodiment provides access to the wallet across application programs, web 
sites^ and forms. 

In the DETAILED DESCRIPTION OF THE INVENTION, please replace paragraph 
[0048] with the following paragraph: 

[0048] This password is then provided back via the wallet interface (34) to the 
requesting application program, web browser, or plug-in for input, or preferably preferrably 
input directly through a method such as spoofing the keyboard buffer (e.g. auto-typing) 
optionally using the screen location provided by the requesting application. "Spoofing" is 
a process whereby a program, such as the wallet manager, may directly write characters 
into the keyboard buffer (or similar input queue), which appears to the system to have 
been "typed" by the user. This allows the invention to automatically enter an input on 
behalf of a user without the user having to make keystrokes, such as retyping the 
password or cutting-and-pasting the password into the field. 
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In the DETAILED DESCRIPTION OF THE INVENTION, please replace paragraph 
[0048] with the following paragraph: 

[0061 ] These "maintenance" functions are pr e f e rrab l y preferably implemented as part of 
the wallet direct user interface (33) application program, but may alternatively be realized 
as web browser functions or extensions, or additions to other application programs. 

In the DETAILED DESCRIPTION OF THE INVENTION, please replace paragraph 
[0065] with the following paragraph: 

[0065] Upon activation of the password field or password wallet through a method such 
as these, the wallet manager pop-up dialogue (60) is shown on the display, pr e f e rrably 
preferably on top of (e.g. overlaid) the existing window or frame (60) and covering the 
password field (62), as shown in Figure 6(b). 

In the DETAILED DESCRIPTION OF THE INVENTION, please replace paragraph 

[0066] with the following paragraph: 

[0066] The wallet manager pop-up (65) allows the user to enter the wallet master key 
into the master key field (66), as well as pr e ferrably preferably providing user-selectable 
options to change (67), add or delete passwords (68), or simply close (69) the pop-up to 
resume normal interaction with the original window (60). 

In the DETAILED DESCRIPTION OF THE INVENTION, please replace paragraph 

[0070] with the following paragraph: 

[0070] Through use of the invention, the user is allowed to maintain an extensive 
number of user ID's and passwords correlated to specific application programs and web 
sites, without the burden of having to remember all of them. Additionally, the user does 
not have to store all of these user IDs and passwords in another computer file, or written 
on a sheet of paper, which may be found or used by an author i z e d unauthorized user. 
By requiring the entry of the correct password wallet master key, the consolidated 
password list is protected from unauthorized use, while the centralized password storage 
is accessible from any application program and/or web form. 



